Solve Cloudflare Turnstile in Selenium

# Fill a Cloudflare Turnstile widget in Selenium with a token from ZeroCaptcha, on a page you may automate.
# Needs Python 3.9 or later, selenium and the zerocaptcha package:
#   ZEROCAPTCHA_API=https://api.zerocaptcha.io ZEROCAPTCHA_KEY=zc_live_... python fill_turnstile.py
import os

from selenium import webdriver
from selenium.webdriver.support.ui import WebDriverWait
from zerocaptcha import TaskFailedError, ZeroCaptcha

zerocaptcha = ZeroCaptcha(api_key=os.environ["ZEROCAPTCHA_KEY"], base_url=os.environ["ZEROCAPTCHA_API"])

# A widget rendered by script takes its settings from turnstile.render(container, options):
# note each call's options before the page's own scripts run (Chrome's DevTools protocol).
NOTE_RENDERS = """
let api;
Object.defineProperty(window, "turnstile", {
  configurable: true,
  get: () => api,
  set(value) {
    const render = value.render;
    value.render = (container, options = {}) => {
      window.__turnstileRenders = [...(window.__turnstileRenders || []), options];
      return render.call(value, container, options);
    };
    api = value;
  },
});
"""
# The widget's site key, action and cData: its data-sitekey, data-action and data-cdata
# attributes, or the sitekey, action and cData it was rendered with.
READ_WIDGET = """
const element = document.querySelector("[data-sitekey]");
const rendered = (window.__turnstileRenders || [])[0] || {};
if (!element && !window.__turnstileRenders) return null;
return {
  sitekey: element ? element.dataset.sitekey : rendered.sitekey,
  action: (element && element.dataset.action) || rendered.action || null,
  cdata: (element && element.dataset.cdata) || rendered.cData || null,
  callback: element ? element.dataset.callback || null : null,
};
"""

driver = webdriver.Chrome()
driver.execute_cdp_cmd("Page.addScriptToEvaluateOnNewDocument", {"source": NOTE_RENDERS})
driver.get("https://shop.example.com/login")
widget = WebDriverWait(driver, 15).until(lambda d: d.execute_script(READ_WIDGET))

task = {"website_url": driver.current_url, "website_key": widget["sitekey"]}
# Many sites check the action and cData when they verify the token: send them exactly as the
# widget sets them, and leave out any it does not.
if widget["action"]:
    task["action"] = widget["action"]
if widget["cdata"]:
    task["cdata"] = widget["cdata"]
# task["proxy"] = "http://user:pass@proxy.example.net:8080"  # to solve through your own proxy

try:
    # The client sends an Idempotency-Key with the create, so its own retries never make two tasks.
    token = zerocaptcha.solve(**task)
except TaskFailedError as failure:
    # A task that fails or expires costs nothing; its code says why.
    driver.quit()
    raise SystemExit(f"Not solved: {failure.code}")

# Put the token where the widget would: its cf-turnstile-response field, then its callback.
driver.execute_script(
    "for (const input of document.querySelectorAll('[name=\"cf-turnstile-response\"]'))"
    " input.value = arguments[0];"
    " if (arguments[1] && typeof window[arguments[1]] === 'function') window[arguments[1]](arguments[0]);",
    token,
    widget["callback"],
)
driver.find_element("css selector", "button[type=submit]").click()
driver.quit()